Test Kennung:	1.3.6.1.4.1.25623.1.0.54382
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Security Advisory (FreeBSD-SA-05:17.devfs.asc)
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-05:17.devfs.asc
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:17.devfs.asc Vulnerability Insight: The jail(2) system call allows a system administrator to lock a process and all of its descendants inside an environment with a very limited ability to affect the system outside that environment, even for processes with superuser privileges. It is an extension of, but far more powerful than, the traditional UNIX chroot(2) system call. The device file system, or devfs(5), provides access to kernel's device namespace in the global file system namespace. This includes access to system devices such as storage devices, kernel and system memory devices, BPF devices, and serial port devices. Devfs is generally mounted as /dev. Devfs rulesets allow an administrator to hide certain device nodes. This is most commonly applied to a devfs mounted for use inside a jail, in order to make devices inaccessible to processes within that jail. Due to insufficient parameter checking of the node type during device creation, any user can expose hidden device nodes on devfs mounted file systems within their jail. Device nodes will be created in the jail with their normal default access permissions. Solution: Upgrade your system to the appropriate stable release or security branch dated after the correction date. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2218 BugTraq ID: 14334 http://www.securityfocus.com/bid/14334 FreeBSD Security Advisory: FreeBSD-SA-05:17 ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc http://www.osvdb.org/18123 http://securitytracker.com/id?1014536 http://secunia.com/advisories/16145 XForce ISS Database: freebsd-devfs-gain-privileges(21451) https://exchange.xforce.ibmcloud.com/vulnerabilities/21451
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.